REMARKS 



Claims 1-7, 9-29, 31-32, 35-38, and 40-44 are pending. Claims 1 and 44 have been 
amended. Claims 46-48 have been added. No new matter has been added. The rejections of 
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the claims are respectfully traversed in light of the amendments and following remarks and 
reconsideration is requested. 

Rejection Under 35 U.S.C. S 103 

Claims 1-7, 9-17, 19-29, 31-32, 35-38, and 40-44 are rejected under 35 U.S.C. § 
103(a) as being unpatentable over Sims, III (U.S. Patent No. 6,550,011 hereinafter "Sims") in 
view of Abbott et al. (U.S. Patent No. 6,671,808 hereinafter "Abbott"). 

In rejecting the claims, the Examiner writes in part: 

In respect to claim 1, Sims discloses ... a user program running on 
the processing device, the user program configured to control access to 
the rights controlled data object; a user program security module 
configured to at least partially decrypt the secure package using a user 
program key (see col.9, lines 60-67). 

However, Sims discloses the following: 

Additionally or alternatively, it is also possible to uniquely encrypt 
the content per user so that if unauthorized copies are made available 
or a secret key is published the source might be identified. However, 
use of multiple content kevs for a single protected work increases costs 
in that multiple keys must be generated and maintained as well as 
multiple pr[o]cessing of the content to encrypt it must be 
accomplished. (Sims, col.9, lines 60-67) (emphasis added). 

[T]he information use device is preferably adapted to associate each 
content key with its corresponding content. (Sims, col. 11, lines 30- 
32). 

Thus, Sims may disclose a key associated with content or a device but not a user 
program key associated with the user program . Abbott is directed toward a "USB-compliant 
personal key" and does not remedy the above-noted deficiency of Sims. Applicant could not 
locate any disclosure in either Sims or Abbott related to a key associated with the user 
program. Accordingly, Sims in view of Abbott does not disclose or suggest the use of 
multiple levels of encryption/decryption with keys associated with the user program, the user, 
and the processing device. 
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In contrast, amended Claim 1 recites a data processor, comprising "a user program 
security module configured to at least partially decrypt the secure package using a user 
program key associated with the user program: a user key device associated with a user, the 



user key device detachably connected to the processing device, accessible by the user 



program, and configured to restrict the use of the data object to the user using a user kev: and 
a machine key device connected to and associated with the processing device and accessible 



by the user program, the machine key device configured to restrict the use of the data object 
to the user data processor using a machine key ." 

Similarly, Claim 25 recites a method, comprising "associating a user program kev 
with a user program configured to run on a user data processor; . . . associating a machine key 
device with the particular user data processor, wherein the machine key device is accessible 
by the user program, and wherein the machine key device maintains a portion of a machine 
key; . . . associating a user kev device with the particular user, wherein the user key device is 



accessible by the user program, and wherein the user key device maintains a portion of a user 
key ." 

Similarly, Claim 32 recites a method, comprising "associating a user program kev 
with a user program configured to run on a user data processor; . . . associating a machine key 
device with the particular user data processor, wherein the machine key device is accessible 
by the user program, and wherein the machine key device maintains a portion of a machine 
key; . . . associating a user kev device with the particular user, wherein the user key device is 
accessible by the user program, and wherein the user key device maintains a portion of a user 
kev ." 

Similarly, Claim 38 recites a method, comprising "associating a user program kev 
with a user program configured to run on a user data processor; . . . associating a machine key 
with the particular user data processor; . . . associating a user kev with the particular user." 

Similarly, Claim 44 recites "a secure data package . . . comprising a controlled portion 
of the data object, the controlled portion encrypted such that decryption requires both a user 
program k ev and a machine kev. wherein a portion of the user program key is maintained by 
and associated with a user program configured to run on a user data processor to provide 
controlled access to the data object, wherein the user data processor has a permanently 
attached machine key device configured to maintain the machine key, and wherein the 
controlled portion comprises an essential portion of the data object, wherein the controlled 
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portion is additionally encrypted such that decryption requires a user key, wherein the user 
key is maintained by a user key device associated with a particular user and detachably 
connected to the processing device." 

&erefOTe>-because-Sims-m^ 



limitations of independent Claims 1, 25, 32, 38, and 44, Claims 1, 25, 32, 38, and 44 are 
patentable over Sims in view of Abbott. 

Claims 2-7, 9-17, and 19-24 are dependent on Claim 1, Claims 26-29 and 31 are 
dependent on Claim 25, Claims 35-37 are dependent on Claim 32, Claims 40-43 are 
dependent on Claim 38, and contain additional limitations that further distinguish them from 
Sims in view of Abbott. In particular, Abbott does not disclose or suggest that "the user key 
device is configured to at least partially decrypt the secure package using the user key," as 
recited in Claim 10 and further explained in the "New Claims" section below. Therefore, 
Claims 2-7, 9-17, 19-24, 26-29, 31, 35-37, and 40-43 are patentable over Sims in view of 
Abbott for at least the same reasons stated above with regard to Claims 1, 25, 32, and 38. 

Claim 18 is rejected under 35 U.S.C. § 103(a) as being unpatentable over Sims in view 
of Abbott and further in view of Keeler, Jr. et al. (U.S. Patent No. 6,502,130 hereinafter 
"Keeler"). Keeler is directed toward a "system and method which collects dynamic 
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connectivity data from an area network interconnecting multiple computing devices" (Keeler, E ^ 
Abstract) and does not remedy the deficiencies of Sims and Abbott noted above. Claim 18 is l> 



also dependent on Claim 1 and contains additional limitations that further distinguish it from t £ 
Sims in view of Abbott and further in view of Keeler. Therefore, because neither Sims nor 
Abbott nor Keeler, alone or in combination, disclose or suggest all the limitations of Claim 
1 8, Claim 1 8 is patentable over Sims in view of Abbott and further in view of Keeler for at 
least the same reasons stated above with respect to Claim 1 . 
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New Claims 



Claims 46-48 are added, dependent on Claim 1, and contain additional limitations that 
further distinguish them from Sims in view of Abbott and further in view of Keeler. In 
particular, Applicant submits that Abbott only discloses that the "personal key provides for 
the storage and management of digital certificates" and "for the generation, storage, and 
management of many passwords." (Abbott, col.3, lines 31-38). Abbott further discloses that 
"digital certificates allow the recipient to validate the authenticity of a public key." (Abbott, 
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col.2, lines 27-31). Thus, Abbott discloses an authentication functionality of a personal key 
but does not disclose or suggest encryption and decryption functionality or the use of a user 
key for decryption. Therefore, Claims 46-48 are patentable over the cited references for at 
least the same reasons stated above with respect to Claim 1 . 
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CONCLUSION 

For the above reasons, Applicant believes pending Claims 1-7, 9-29, 3 1-32, 35-38, 40- 
44, and 46-48 are now in condition for allowance and allowance of the application is hereby 

telephone Applicants' Attorney at (949) 752-7040. 
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I certify that this paper is being sent via First Class Mail to the 
Commissioner for Patent, P.O. Box 1450, Alexandria, VA 20230- 
1450* on the date stated below.. 



una Kavanaugh 



November 23, 2005 



Respectfully submitted, 



David S. Park 

Attorney for Applicants) 

Reg. No. 52,094 
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